Platform Rule Allocation

Table 1. Platform Rule Allocation
Table Profile Name Table Name X450-G2, X460-G2,

X670-G2

X870

X440-G2

X620

X690

X590

X465

X695

X435
Default

MAC Rules

IPv6 Rules

IPv4 Rules

L2 Rules

ExtremeXOS App/System Rules

256

256

256

184

2,048 (8 Slices)

256

256

256

184

2,048 (4 Slices)

0

0

256

184

1,024 (4 Slices)

512

512

512

440

2,048 (4 Slices)

N/A

0

0

128

56

512 (4 Slices)

less-acl more-ipv4

MAC Rules

IPv6 Rules

IPv4 Rules

L2 Rules

ExtremeXOS App/System Rules

256

256

768

184

1,024 (4 Slices)

256

256

256

184

2,048 (4 Slices)

0

0

256

184

1,024 (4 Slices)

512

512

512

440

2,048 (4 Slices)

N/A

0

0

128

56

512 (4 Slices)

less-acl more-ipv4-no-ipv6

MAC Rules

IPv6 Rules

IPv4 Rules

L2 Rules

ExtremeXOS App/System Rules

256

0

1,024

184

1,024 (4 Slices)

256

0

512

184

2,048 (4 Slices)

0

0

256

184

1,024 (4 Slices)

512

0

1,024

440

2,048 (4 Slices)

N/A

0

0

128

56

512 (4 Slices)

less-acl more-ipv4-no-mac-no-ipv6

MAC Rules

IPv6 Rules

IPv4 Rules

L2 Rules

ExtremeXOS App/System Rules

0

0

1,280

184

1,024 (4 Slices)

0

0

768

184

2,048 (4 Slices)

0

0

256

184

1,024 (4 Slices)

0

0

1,536

440

2,048 (4 Slices)

N/A

0

0

128

56

512 (4 Slices)

more-ipv4-no-ipv6

MAC Rules

IPv6 Rules

IPv4 Rules

L2 Rules

ExtremeXOS App/System Rules

256

0

512

184

2,048 (8 Slices)

256

0

512

184

2,048 (4 Slices)

0

0

256

184

1,024 (4 Slices)

512

0

1,024

440

2,048 (4 Slices)

N/A

0

0

128

56

512 (4 Slices)

more-ipv4-no-mac-no-ipv6

MAC Rules

IPv6 Rules

IPv4 Rules

L2 Rules

ExtremeXOS App/System Rules

0

0

768

184

2,048 (8 Slices)

0

0

768

184

2,048 (4 Slices)

0

0

256

184

1,024 (4 Slices)

0

0

1,536

440

2,048 (4 Slices)

N/A

0

0

128

56

512 (4 Slices)

more-mac-no-ipv6

MAC Rules

IPv6 Rules

IPv4 Rules

L2 Rules

ExtremeXOS App/System Rules

512

0

256

184

2,048 (8 Slices)

512

0

256

184

2,048 (4 Slices)

0

0

256

184

1,024 (4 Slices)

1,024

0

512

440

2,048 (4 Slices)

N/A

0

0

128

56

512 (4 Slices)

less-acl-more-ipv4-no-l2 *

Auth Users (Max.)

MAC Rules

IPv6 Rules

IPv4 Rules

L2 Rules

App/System Rules

1,024

256

256

952

0

1,024 (4 Slices)

512/1,024

512

512

952

0

2,048 (4 Slices)

512

256

256

440

0

2,048 (4 Slices)

256

0

0

440

0

1,024 (4 Slices)

N/A

0

0

184

0

512 (4 Slices)

less-acl-more-ipv4-no-mac-no-ipv6-no-l2 *

Auth Users (Max.)

MAC Rules

IPv6 Rules

IPv4 Rules

L2 Rules

App/System Rules

1,024

0

0

1,464

0

1,024 (4 Slices)

512/1,024

0

0

1,976

0

2,048 (4 Slices)

512

0

0

952

0

2,048 (4 Slices)

256

0

0

440

0

1,024 (4 Slices)

N/A

0

0

184

0

512 (4 Slices)

more-ipv4-no-l2 *

Auth Users (Max.)

MAC Rules

IPv6 Rules

IPv4 Rules

L2 Rules

App/System Rules

1,024

256

256

440

0

2,048 (8 Slices

512/1,024

512

512

952

0

2,048 (4 Slices)

512

256

256

440

0

2,048 (4 Slices)

256

0

0

440

0

1,024 (4 Slices)

N/A

0

0

184

0

512 (4 Slices)

more-ipv4-no-mac-no-ipv6-no-l2 *

Auth Users (Max.)

MAC Rules

IPv6 Rules

IPv4 Rules

L2 Rules

App/System Rules

1,024

0

0

952

0

2,048 (8 Slices)

512/1,024

0

0

1,976

0

2,048 (4 Slices

512

0

0

952

0

2,048

256

0

0

440

0

1,024 (4 Slices)

N/A

0

0

440

0

512 (4 Slices)

* The L2 rule group normally includes ether-type and port qualifiers. When no-l2 is used, all the ether rules are accounted for in the IPv4 group. If you remove both L2 and IPv4 (no-l2 and no-ipv4), then ether rules are accounted for in the IPv6 group. If you remove L2, IPv4, and IPv6, (no-l2, no-ipv4, no-ipv6), then ether rules are accounted for in the MAC group.

For information about the maximum authenticated users per switch, see the Limits table of the ExtremeXOS Release Notes.

In ExtremeXOS 22.4, you can use the profile modifier feature to return resources back to ACL from the specified profile. Use the profile-modifier option in the following command:

configure policy resource-profile [default |less-acl [more-ipv4 | more-ipv4-no-ipv6 | more-ipv4-no-l2 |more-ipv4-no-mac-no-ipv6] | more-ipv4-no-mac-no-ipv6-no-l2 | more-ipv4-no-ipv6 | more-ipv4-no-mac-no-ipv6 | more-mac-no-ipv6] {profile-modifier [{no-mac no_mac} {no-ipv4 no_ipv4} {no-ipv6 no_ipv6} {no-l2 no_l2}]}

To see what profile modifier settings you have configured, use the following command:

show policy resource-profile {[default | less-acl [more-ipv4 |more-ipv4-no-ipv6 | more-ipv4-no-l2 |more-ipv4-no-mac-no-ipv6 | more-ipv4-no-mac-no-ipv6-no-l2] |more-ipv4-no-ipv6 | more-ipv4-no-mac-no-ipv6 | more-mac-no-ipv6] {profile-modifier [ {no-mac} {no-ipv4} {no-ipv6} {no-l2}]}}

The following tables show the maximum number of slices available with the resource profile modifier enabled.

Table 2. Slices Available with Resource Profile Modifier for ExtremeSwitching X450-G2, X460-G2
Profile Name Max Slices Available No Profile Modifier no-mac no-ipv4 no-ipv6 no-l2 no-mac, no-ipv4 no-mac, no-ipv6 no-mac--no-l2 no-ipv4, no-ipv6 no-pv4-no-l2 no-ipv6-no-l2 no-mac-no-ipv4-no-ipv6 no-mac-no-ipv4-no-l2 no-mac-noipv6-no-l2 no-ipv4-no-ipv6-no-l2
Default 4 4 3 3 3 3 2 2 2 2 2 2 1 1 1 1
less-acl-more-ipv4 6 6 5 3 5 5 2 4 4 2 2 4 1 1 3 1
less-acl-more-ipv4-no-ipv6 6 6 5 2 6 5 1 5 4 2 1 5 1 N/A 4 1
less-acl-more-ipv4-no-l2 6 6 5 2 5 6 1 4 5 1 2 5 N/A 1 4 1
less-acl-more-ipv4-no-mac-no-ipv6 6 6 6 1 6 5 1 6 5 1 N/A 5 1 N/A 5 N/A
less-acl-more-ipv4-no-mac-no-ipv6-no-l2 6 6 6 N/A 6 6 N/A 6 6 N/A N/A 6 N/A N/A 6 N/A
more-ipv4-no-ipv6 4 4 3 2 4 3 1 3 2 2 1 3 1 N/A 2 1
more-ipv4-no-l2 4 4 3 2 3 4 1 2 3 1 2 3 N/A 1 2 1
more-ipv4-no-mac-no-ipv6 4 4 4 1 4 3 1 4 3 1 N/A 3 1 N/A 3 N/A
more-ipv4-no-mac-no-ipv6-no-l2 4 4 4 N/A 4 4 N/A 4 4 N/A N/A 4 N/A N/A 4 N/A
more-mac-no-ipv6 4 4 2 3 4 3 1 2 1 3 2 3 1 N/A 1 2
Table 3. Slices Available with Resource Profile Modifier for ExtremeSwitching X435, X440-G2 and X620
Profile Name Max Slices Available No Profile Modifier No-mac No-ipv4 No-ipv6 No-l2 No-mac, no-ipv4 No-mac, no-ipv6 No-mac-no-l2 No-ipv4, no-ipv6 no-ipv4-no-l2 no-ipv6- no-l2 no-mac-no-ipv4-no-ipv6 no-mac-no-ipv4- no-l2 no-mac-no-ipv6- no-l2 no-ipv4- no-ipv6- no-l2
Default 2 2 2 1 2 1 1 2 1 1 N/A 1 1 N/A 1 N/A
less-acl more-ipv4 2 2 2 1 2 1 1 2 1 1 N/A 1 1 N/A 1 N/A
less-acl-more-ipv4-no-ipv6 2 2 2 1 2 1 1 2 1 1 N/A 1 1 N/A 1 N/A
less-acl-more-ipv4- no-l2 2 2 2 N/A 2 2 N/A 2 2 N/A N/A 2 N/A N/A 2 N/A
less-acl-more-ipv4-no-mac-no-ipv6 2 2 2 1 2 1 1 2 1 1 N/A 1 1 N/A 1 N/A
less-acl-more-ipv4- no-mac- no-ipv6- no-l2 2 2 2 N/A 2 2 N/A 2 2 N/A N/A 2 N/A N/A 2 N/A
more-ipv4-no-ipv6 2 2 2 1 2 1 1 2 1 1 N/A 1 1 N/A 1 N/A
more-ipv4- no-l2 2 2 2 N/A 2 2 N/A 2 2 N/A N/A 2 N/A N/A 2 N/A
more-ipv4-no-mac-no-ipv6 2 2 2 1 2 1 1 2 1 1 N/A 1 1 N/A 1 N/A
more-ipv4- no-mac- no-ipv6- no-l2 2 2 2 N/A 2 2 N/A 2 2 N/A N/A 2 N/A N/A 2 N/A
more-mac-no-ipv6 2 2 2 1 2 1 1 2 1 1 N/A 1 1 N/A 1 N/A
Table 4. Slices Available with Resource Profile Modifier for ExtremeSwitching X670-G2, X870
Profile Name Max Slices Available No Profile Modifier No-mac No-ipv4 No-ipv6 No-l2 No-mac, no-ipv4 No-mac, no-ipv6 no-mac-- no-l2 No-ipv4, no-ipv6 no-ipv4-no-l2 no-ipv6- no-l2 no-mac-no-ipv4-no-ipv6 no-mac-no-ipv4- no-l2 no-mac-no-ipv6- no-l2 no-ipv4- no-ipv6- no-l2
Default 4 4 3 3 3 3 2 2 2 2 2 2 1 1 1 1
less-acl more-ipv4 4 4 3 3 3 3 2 2 2 2 2 2 1 1 1 1
less-acl-more-ipv4-no-ipv6 4 4 3 2 4 3 1 3 2 2 1 3 1 N/A 2 1
less-acl-more-ipv4- no-l2 4 4 3 2 3 4 1 2 3 1 2 3 N/A 1 2 1
less-acl-more-ipv4-no-mac-no-ipv6 4 4 4 1 4 3 1 4 3 1 N/A 3 1 N/A 3 N/A
less-acl-more-ipv4- no-mac- no-ipv6- no-l2 4 4 4 N/A 4 4 N/A 4 4 N/A N/A 4 N/A N/A 4 N/A
more-ipv4-no-ipv6 4 4 3 2 4 3 1 3 2 2 1 3 1 N/A 2 1
more-ipv4- nol2 4 4 3 2 3 4 1 2 3 1 2 3 N/A 1 2 1
more-ipv4-no-mac-no-ipv6 4 4 4 1 4 3 1 4 3 1 N/A 3 1 N/A 3 N/A
more-ipv4- no-mac- no-ipv6- no-l2 4 4 4 N/A 4 4 N/A 4 4 N/A N/A 4 N/A N/A 4 N/A
more-mac-no-ipv6 4 4 2 3 4 3 1 2 1 3 2 3 1 N/A 1 2
Table 5. Slices Available with Resource Profile Modifier for ExtremeSwitching X590, X690, X695, , and X465
Profile Name Max Slices Available No Profile Modifier No-mac No-ipv4 No-ipv6 No-l2 No-mac, no-ipv4 No-mac, no-ipv6 no-mac-- no-l2 No-ipv4, no-ipv6 no-ipv4-no-l2 no-ipv6- no-l2 no-mac-no-ipv4-no-ipv6 no-mac-no-ipv4- no-l2 no-mac-no-ipv6- no-l2 no-ipv4- no-ipv6- no-l2
Default 4 4 3 3 3 3 2 2 2 2 2 2 1 1 1 1
less-acl more-ipv4 4 4 3 3 3 3 2 2 2 2 2 2 1 1 1 1
less-acl-more-ipv4-no-ipv6 4 4 3 2 4 3 1 3 2 2 1 3 1 N/A 2 1
less-acl-more-ipv4- no-l2 4 4 3 2 3 4 1 2 3 1 2 3 N/A 1 2 1
less-acl-more-ipv4-no-mac-no-ipv6 4 4 4 1 4 3 1 4 3 1 N/A 3 1 N/A 3 N/A
less-acl-more-ipv4- no-mac- no-ipv6- no-l2 4 4 4 N/A 4 4 N/A 4 4 N/A N/A 4 N/A N/A 4 N/A
more-ipv4-no-ipv6 4 4 3 2 4 3 1 3 2 2 1 3 1 N/A 2 1
more-ipv4- no-l2 4 4 3 2 3 4 1 2 3 1 2 3 N/A 1 2 1
more-ipv4-no-mac-no-ipv6 4 4 4 1 4 3 1 4 3 1 N/A 3 1 N/A 3 N/A
more-ipv4- no-mac- no-ipv6-no-l2 4 4 4 N/A 4 4 N/A 4 4 N/A N/A 4 N/A N/A 4 N/A
more-mac-no-ipv6 4 4 2 3 4 3 1 2 1 3 2 3 1 N/A 1 2